Julkri | TSU-05 | Tehtävät ja vastuut

How to fill the requirement

Julkri: TL IV-I

TSU-05: Tehtävät ja vastuut

Task name

Priority

Status

Theme

Policy

Other requirements

ISMS description and maintenance

Critical

High

Normal

Low

Fully done

Mostly done

Partly done

Not done

Risk management and leadership

Cyber security management

Task is fulfilling also these other security requirements

6.3: Planning of changes

ISO27k1 Full

8.1: Operational planning and control

ISO27k1 Full

4.1: Organization and its context

ISO27k1 Full

5.1.1: Policies for information security

ISO27 Full

PR.AT-5: Physical and cybersecurity personnel

NIST

1. Task description

The organization must operate, maintain, and continuously develop a security management system.

The boundaries and scope, contents, role, cumulative implementation information and other necessary descriptive information related to the management system must be clearly documented.

Personnel guidelines for safe processing of personal and confidential data

Critical

High

Normal

Low

Fully done

Mostly done

Partly done

Not done

Privacy

Processing principles and accountability

Task is fulfilling also these other security requirements

29. Processing under the authority of the controller or processor

GDPR

7.2.2: Information security awareness, education and training

ISO27 Full

18.1.4: Privacy and protection of personally identifiable information

ISO27 Full

12.1.1: Documented operating procedures

ISO27 Full

11.2.8: Unattended user equipment

ISO27 Full

1. Task description

The Data Protection Officer (or other responsible person) has drawn up operating instructions for personnel handling personal data. In addition, the Data Protection Officer is ready to advise the controller, personal data processing partners or their own staff on compliance with GDPR or other data protection requirements.

No items found.